beautypg.com

Switchport voice vlan security, Switchport voice vlan, Security – Microsens MS453490M Management Guide User Manual

Page 814

background image

C

HAPTER

34

| VLAN Commands

Configuring Voice VLANs

– 814 –

D

EFAULT

S

ETTING

OUI: Enabled

LLDP: Disabled

C

OMMAND

M

ODE

Interface Configuration

C

OMMAND

U

SAGE

When OUI is selected, be sure to configure the MAC address ranges in

the Telephony OUI list (see the

voice vlan mac-address

command. MAC

address OUI numbers must be configured in the Telephony OUI list so

that the switch recognizes the traffic as being from a VoIP device.

LLDP checks that the “telephone bit” in the system capability TLV is

turned on. See

"LLDP Commands" on page 883

for more information on

LLDP.

E

XAMPLE

The following example enables the OUI method on port 1 for detecting

VoIP traffic.

Console(config)#interface ethernet 1/1

Console(config-if)#switchport voice vlan rule oui

Console(config-if)#

switchport voice

vlan security

This command enables security filtering for VoIP traffic on a port. Use the

no form to disable filtering on a port.

S

YNTAX

[no] switchport voice vlan security

D

EFAULT

S

ETTING

Disabled

C

OMMAND

M

ODE

Interface Configuration

C

OMMAND

U

SAGE

Security filtering discards any non-VoIP packets received on the port

that are tagged with the voice VLAN ID. VoIP traffic is identified by

source MAC addresses configured in the Telephony OUI list, or through

LLDP that discovers VoIP devices attached to the switch. Packets

received from non-VoIP sources are dropped.

When enabled, be sure the MAC address ranges for VoIP devices are

configured in the Telephony OUI list (

voice vlan mac-address

).